Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier: owXn3mY9QU+KZ6bwjbLSlvCT3rZR3wv2FEQ45DIz4FM=
Subject key identifier: E5:31:DA:39:E1:67:B4:7F:AD:64:1E:CA:35:55:F5:74:E6:DF:05:93
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial: 019A70A4F392B1D27CCA87C3DD718888042A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number: 141F
Signing time: Tue 11 Nov 2025 02:00:49 +0000
Manifest this update: Tue 11 Nov 2025 02:00:49 +0000
Manifest next update: Wed 12 Nov 2025 02:00:49 +0000
Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: mFhZdo4EK7A4iq9z3mjP6+VEdtwUtFepK3hhFySkMeg=)
2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f3:92:b1:d2:7c:ca:87:c3:dd:71:88:88:04:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Validity
Not Before: Nov 11 02:00:49 2025 GMT
Not After : Nov 12 02:00:49 2025 GMT
Subject: CN=e531da39e167b47fad641eca3555f574e6df0593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:40:e7:f1:a2:0d:f3:da:38:2f:28:a4:c5:
27:73:40:15:4a:94:24:ea:df:02:bb:bf:ed:b7:c3:
91:7a:14:d9:49:de:16:da:89:13:fe:93:f8:4a:7e:
25:7f:49:7d:4e:2d:ec:63:70:81:7b:4a:fc:d3:03:
16:3f:84:96:91:75:d0:9e:83:53:6d:e7:7c:2b:01:
48:5e:6b:f3:1a:cf:9f:ba:d1:41:ed:36:1d:fa:58:
9c:ee:4d:8e:89:05:ca:00:20:62:96:f4:33:64:ad:
8a:4a:8e:18:6e:8e:a6:2c:55:32:68:2a:0f:12:1c:
e9:52:6e:60:1e:e8:2d:f2:d7:98:44:1b:2c:73:dc:
b0:3c:df:47:d4:25:5e:a3:4b:87:54:61:33:d4:ee:
ae:ff:1b:b0:c8:84:ce:2f:a9:da:97:e6:da:fd:fd:
84:74:ee:9f:95:94:7d:69:8f:67:4a:af:b7:1b:4e:
7b:79:b1:8e:52:47:ed:8a:48:b1:4a:97:1f:f0:1a:
32:84:02:38:55:2f:cb:2d:c6:d1:92:0e:42:ba:73:
51:cc:8c:18:d5:d4:64:78:f9:c8:13:fe:c2:0a:3e:
e7:2b:52:42:8e:e8:b7:60:4f:4b:ec:5a:0e:df:59:
cd:49:83:ba:e5:23:a0:98:90:7b:b0:89:14:ab:fc:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:DA:39:E1:67:B4:7F:AD:64:1E:CA:35:55:F5:74:E6:DF:05:93
X509v3 Authority Key Identifier:
keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:50:80:ea:a1:49:4c:ec:4f:87:4a:57:d3:5a:02:d2:f9:3a:
4d:25:2e:7e:09:fa:05:01:aa:cf:c0:cd:5d:5a:19:56:a5:33:
66:9b:d0:cd:d1:e8:8d:b9:25:93:8b:8f:5d:a6:0b:7a:91:60:
4d:61:72:d9:b1:05:f5:99:da:70:a3:33:29:92:d2:b3:d1:df:
57:85:68:4c:a2:52:05:30:ab:61:66:00:57:bd:2e:bc:08:84:
78:f7:87:8c:25:57:c4:05:48:c7:89:a5:39:91:86:98:4b:1e:
2b:47:d6:b2:ce:f7:69:1d:6c:55:78:c0:67:e8:61:6b:0f:42:
0e:d7:56:cf:fc:5b:8a:0e:70:f6:4d:16:e3:99:11:b4:f9:99:
dc:36:7c:28:2f:16:ec:1d:40:be:70:e9:ca:79:22:dd:d3:fd:
56:cd:89:06:2e:97:46:bf:c5:1b:32:9a:f5:97:79:a5:e9:00:
24:f3:e5:4c:1d:d3:a6:52:8e:5b:7a:50:f9:3f:be:13:50:fe:
7f:4d:2a:ae:db:0c:00:47:b3:52:80:7b:de:be:87:3b:4b:6d:
d4:06:78:a9:77:a8:d9:60:02:14:ca:be:38:d3:ad:62:80:60:
3c:75:b8:7d:e8:ec:49:cd:a0:23:ff:3b:7b:5e:20:36:ac:ae:
12:65:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client